Install all available Windows Updates

PSWindowsUpdate module:

# Set execution policy
Set-ExecutionPolicy Bypass -Scope Process -Force

# Kill MRT and uninstall
Stop-Process -Name "MRT" -Force -ErrorAction SilentlyContinue
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\MRT" /v "DontOfferThroughWUAU" /t REG_DWORD /d 1 /f
Start-Process "wusa.exe" -ArgumentList "/uninstall /kb:890830 /quiet /norestart" -Wait

# Reset Windows Update components
Write-Host "Resetting Windows Update components..." -ForegroundColor Yellow
Stop-Service wuauserv, bits, cryptsvc -Force
Get-Process trustedinstaller -ErrorAction SilentlyContinue | Stop-Process -Force -ErrorAction SilentlyContinue

# Delete Windows Update cache
Remove-Item "$env:SystemRoot\SoftwareDistribution\*" -Recurse -Force -ErrorAction SilentlyContinue
Remove-Item "$env:SystemRoot\System32\catroot2\*" -Recurse -Force -ErrorAction SilentlyContinue

# Reset Windows Update services to default security descriptors
Start-Process "sc.exe" -ArgumentList "sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"
Start-Process "sc.exe" -ArgumentList "sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"

# Restart services
Start-Service wuauserv, bits, cryptsvc
Start-Process "wuauclt.exe" -ArgumentList "/resetauthorization /detectnow" -Wait

# Install NuGet provider if not present
if (!(Get-PackageProvider -ListAvailable -Name NuGet -ErrorAction SilentlyContinue)) {
   Write-Host "Installing NuGet provider..."
   Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force
}

# Import the PSWindowsUpdate module - install if not present
if (!(Get-Module -ListAvailable -Name PSWindowsUpdate)) {
   Write-Host "PSWindowsUpdate module not found. Installing..."
   Install-Module PSWindowsUpdate -Force -Confirm:$false
}
Import-Module PSWindowsUpdate

function Get-WindowsUpdateStatus {
    Write-Host "`nChecking for Windows Updates..." -ForegroundColor Yellow
    
    try {
        # Get available updates with error handling - including all types
        $updates = Get-WindowsUpdate -RootCategories "Critical Updates","Definition Updates","Drivers","Feature Packs","Security Updates","Service Packs","Tools","Update Rollups","Updates","Upgrades" -MicrosoftUpdate -ErrorAction Stop
        
        if ($updates.Count -eq 0) {
            Write-Host "No updates available." -ForegroundColor Green
            return $false
        }
        else {
            Write-Host "`nFound $($updates.Count) update(s):" -ForegroundColor Cyan
            $updates | ForEach-Object {
                Write-Host "- $($_.Title)" -ForegroundColor White
            }
            return $true
        }
    }
    catch {
        Write-Host "Error checking for updates: $_" -ForegroundColor Red
        Write-Host "Attempting to reset Windows Update components..." -ForegroundColor Yellow
        throw
    }
}

function Install-AvailableUpdates {
    Write-Host "`nInstalling Windows Updates..." -ForegroundColor Yellow
    
    try {
        # Install updates and reboot if required - including all types
        $installResult = Install-WindowsUpdate -RootCategories "Critical Updates","Definition Updates","Drivers","Feature Packs","Security Updates","Service Packs","Tools","Update Rollups","Updates","Upgrades" -MicrosoftUpdate -AcceptAll -AutoReboot:$true -Verbose -ErrorAction Stop
        
        if ($installResult.Count -gt 0) {
            Write-Host "`nInstallation Summary:" -ForegroundColor Cyan
            $installResult | ForEach-Object {
                Write-Host "- $($_.Title): $($_.Result)" -ForegroundColor White
            }
            
            # Check if reboot is required
            if (Get-WURebootStatus -Silent) {
                Write-Host "`nSystem will restart automatically to complete updates." -ForegroundColor Red
                Start-Sleep -Seconds 10  # Give time to read the message
                Restart-Computer -Force
            }
        }
    }
    catch {
        Write-Host "Error installing updates: $_" -ForegroundColor Red
        throw
    }
}

# Main execution
try {
   if (Get-WindowsUpdateStatus) {
       Install-AvailableUpdates
   }
} catch {
   Write-Host "An error occurred: $_" -ForegroundColor Red
   Write-Host "Please ensure you're running PowerShell as Administrator." -ForegroundColor Red
}

Oneliner Windows Update Session:

(Invoke-Command -ScriptBlock {try { $Session = New-Object -ComObject Microsoft.Update.Session; $Searcher = $Session.CreateUpdateSearcher(); $SearchResult = $Searcher.Search("IsInstalled=0"); $UpdatesToDownload = New-Object -ComObject Microsoft.Update.UpdateColl; if($SearchResult.Updates.Count -eq 0) { Write-Host "No updates found." } else { foreach($Update in $SearchResult.Updates){ if($Update.IsInstalled -eq $false){ $UpdatesToDownload.Add($Update); Write-Host "Found update: $($Update.Title)" } }; if($UpdatesToDownload.Count -gt 0) { $Downloader = $Session.CreateUpdateDownloader(); $Downloader.Updates = $UpdatesToDownload; Write-Host "Downloading..."; $Downloader.Download(); $Installer = $Session.CreateUpdateInstaller(); $Installer.Updates = $UpdatesToDownload; Write-Host "Installing..."; $InstallResult = $Installer.Install(); Write-Host "`nInstallation Result: $($InstallResult.HResult)" } else { Write-Host "System is up to date." } } } catch { Write-Host "Error: $($_.Exception.Message)" }})

Install all available Windows Updates

Password Generator

Most viewed

Most recent